FinSpy (aka FinFisher or Wingbird) has been driven from its hiding place following an eight-month investigation by Kaspersky researchers. The spyware trojan has been hiding behind various first-stage implants that have helped to cloak its activities. It’s a full-service spyware capable of stealing information and credentials as well as keeping tabs on user activities. The researchers say the new samples are protected with multiple layers of evasion tactics, including a sample that infects machines by replacing the Windows UEFI bootloader.”]
Source: https://threatpost.com/finspy-surveillance-kit/175068/